=3){ // if count reaches 3, lock account. updateOdbcData("UPDATE clients SET [locked]=1 WHERE [clientno]=".$getclient['clientno'].";"); $login_error='Sorry but you have entered an invalid username/password 3 times, please contact Cowan Air to unlock your account.'; } else { $login_error='Sorry invalid username/password, please try again.'; } } else if($getclient['password']==$post['password']){ $_SESSION[$sessionid]['client']=$getclient; } /* if(!empty($getclient)){ } else { $_SESSION[$sessionid]=array(); $login_attempts++; if($login_attempts>=3){ $lockedclient=getOdbcData("SELECT clientno FROM clients WHERE `username`='".$post['username']."'",1); print_r($lockedclient); updateOdbcData("UPDATE clients SET [locked]=1 WHERE [clientno]=".$lockedclient['clientno'].";"); $login_error='Sorry but you have entered an invalid username/password 3 times, please contact Cowan Air to unlock your account.'; } else { $login_error='Sorry invalid username/password, please try again.'; } } */ } else { $login_error='Sorry blank username/password, please try again.'; } //print_r($login_attempts); $_SESSION[$sessionid]['attempts']=$login_attempts; } //print_r($_SESSION[$sessionid]['attempts']); if($get['p']=='logout') { session_destroy(); if(IsSet($_SESSION[$sessionid])) unset($_SESSION[$sessionid]); header('Location: index.php'); } $client=$_SESSION[$sessionid]['client']; ////////////////////////////////////////////////////////////////////////////////////////// // POST ////////////////////////////////////////////////////////////////////////////////////////// $recipient='janellep@cowanair.com.au, paulc@cowanair.com.au'; $wheredate='#05/01/2009#'; // MM/DD/YYYY ////////////////////////////////////////////////////////////////////////////////////////// // Client Area ////////////////////////////////////////////////////////////////////////////////////////// if(!$client){ if($login_error){ $page_content.='

'.$login_error.'

'; } else { $page_content.='

Please enter your username and password to log in.

'; } $form[]=array('title'=>'Username','type'=>'oneline','key'=>'username','value'=>$post['username'],'class'=>'oneline'); $form[]=array('title'=>'Password','type'=>'password','key'=>'password','value'=>$post['password'],'class'=>'oneline'); $form[]=array('type'=>'submitbutton','onClick'=>'document.getElementById(\'client_form\').submit();'); $page_content.=make_form($form,array(80,200)); } else { if($client['first']) $welcomename.=$client['first'].' '; $welcomename.=$client['cosurname']; switch($get['p']){ case 'contract': $page_content='

Contract

Coming Soon...

'; break; case 'password': if($_POST){ if($post['pass1']==$post['pass2']){ $info['Old Password']=$post['oldpass']; $info['New Password']=$post['pass1']; $info['Confirm']=$post['pass2']; $emailsent=email_form($recipient,'Update Password',$welcomename,$client['email'],$info); if($emailsent){ $form[]=array('title'=>'Thank you, we will update your password in our records.

As this can take up to a week to process when your old password no longer works, the new one will work.','type'=>'1col','class'=>'h2'); } else { $form[]=array('title'=>'An error occured while trying to submit this form, please contact Cowan Air by phone if this continues.','type'=>'1col','class'=>'h2'); } } } else { $form[]=array('title'=>'Enter New Password & Confirm','type'=>'1col','class'=>'h2'); $form[]=array('title'=>'Old Password','type'=>'password','key'=>'oldpass','class'=>'oneline'); $form[]=array('title'=>'New Password','type'=>'password','key'=>'pass1','class'=>'oneline'); $form[]=array('title'=>'Confirm','type'=>'password','key'=>'pass2','class'=>'oneline'); $form[]=array('type'=>'submitbutton','onClick'=>'document.getElementById(\'client_form\').submit();'); } $page_content='

Change Password

Use the form below to update your contact details. Remember to keep your details updated.

'; $page_content.=make_form($form,array(80,400)); break; case 'updateinfo': if($_POST){ $emailsent=email_form($recipient,'Update Contact Info',$welcomename,$client['email'],$post); if($emailsent){ $form[]=array('title'=>'Thank you, we will update your contact information in our records.','type'=>'1col','class'=>'h2'); } else { $form[]=array('title'=>'An error occured while trying to submit this form, please contact Cowan Air by phone if this continues.','type'=>'1col','class'=>'h2'); } } else { $form[]=array('title'=>'Mailing Address','type'=>'1col','class'=>'h2'); $form[]=array('title'=>'Street No','type'=>'oneline','key'=>'street_no','value'=>$client['cstreetno'],'class'=>'oneline'); $form[]=array('title'=>'Street Name','type'=>'oneline','key'=>'street_name','value'=>$client['cstreet'],'class'=>'oneline'); $form[]=array('title'=>'Suburb','type'=>'oneline','key'=>'suburb','value'=>$client['csuburb'],'class'=>'oneline'); $form[]=array('title'=>'State','type'=>'oneline','key'=>'state','value'=>$client['cstate'],'class'=>'oneline'); $form[]=array('title'=>'Postcode','type'=>'oneline','key'=>'postcode','value'=>$client['cpostcode'],'class'=>'oneline'); $form[]=array('type'=>'break'); $form[]=array('title'=>'Contact Numbers','type'=>'1col','class'=>'h2'); $form[]=array('title'=>'Phone (Business)','type'=>'oneline','key'=>'business_phone','value'=>$client['phbusiness'],'class'=>'oneline'); $form[]=array('title'=>'Phone (Personal)','type'=>'oneline','key'=>'personal_phone','value'=>$client['phprivate'],'class'=>'oneline'); $form[]=array('title'=>'Phone (Mobile)','type'=>'oneline','key'=>'mobile','value'=>$client['phmobile'],'class'=>'oneline'); $form[]=array('title'=>'Fax','type'=>'oneline','key'=>'fax','value'=>$client['phfax'],'class'=>'oneline'); $form[]=array('title'=>'Email','type'=>'oneline','key'=>'email','value'=>$client['email'],'class'=>'oneline'); $form[]=array('type'=>'submitbutton','onClick'=>'document.getElementById(\'client_form\').submit();'); } $page_content='

Update Contact Details

Use the form below to update your contact details. Remember to keep your details updated.

'; $page_content.=make_form($form,array(120,360)); break; case 'servicecall': if($_POST){ $emailsent=email_form($recipient,'Service Call',$welcomename,$client['email'],$post); if($emailsent){ $form[]=array('title'=>'Thank you, a member of our staff will be in contact with you to organize a service call.','type'=>'1col','class'=>'h2'); } else { $form[]=array('title'=>'An error occured while trying to submit this form, please contact Cowan Air by phone if this continues.','type'=>'1col','class'=>'h2'); } } else { $form[]=array('title'=>'Your Name','type'=>'oneline','key'=>'name','value'=>$post['name'],'class'=>'oneline'); $form[]=array('title'=>'Contact No','type'=>'oneline','key'=>'phone','value'=>$post['phone'],'class'=>'oneline'); $form[]=array('title'=>'Details','type'=>'multiline','key'=>'details','value'=>$post['details'],'class'=>'multiline400'); $form[]=array('type'=>'submitbutton','onClick'=>'document.getElementById(\'client_form\').submit();'); } $page_content='

Submit Service Call

Use the form below to submit a service call. Once we receive your request we will contact you to arrange a time.

'; $page_content.=make_form($form,array(80,400)); break; case 'feedback': //print_r($post); if($_POST){ $emailsent=email_form($recipient,'Client Website Feedback',$welcomename,$client['email'],$post); if($emailsent){ $form[]=array('title'=>'Thank you for your feedback.','type'=>'1col','class'=>'h2'); } else { $form[]=array('title'=>'An error occured while trying to submit this form, please contact Cowan Air by phone if this continues.','type'=>'1col','class'=>'h2'); } } else { $form[]=array('title'=>'Feedback','type'=>'multiline','key'=>'feedback','value'=>$post['feedback'],'class'=>'multiline400'); $form[]=array('type'=>'submitbutton','onClick'=>'document.getElementById(\'client_form\').submit();'); } $page_content='

Submit Feedback

Use the form below to submit feedback to us. Let us know what you like and don\'t like about this site so we can provide the best possible online service to you.

'; $page_content.=make_form($form,array(80,400)); break; case 'quotes': //$client['clientno']=521; if($post['siteno'] && $post['siteno']!='all'){ $siteno_search='AND sites.SiteNo='.$post['siteno']; } if($get['show']=='accepted'){ $quotedata=getOdbcData("SELECT sites.SiteName AS _site, quotes.quoteno AS [Quote No], Format([DateEntered],'medium date') AS [Date], qheading AS Description FROM quotes INNER JOIN [sites] ON quotes.SiteNo=sites.SiteNo WHERE ((quotes.DateEntered)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND accepted=1 ".$siteno_search." ORDER BY sites.SiteNo ASC, DateEntered DESC"); $seldata=getOdbcData("SELECT sites.SiteNo AS [_siteno], sites.SiteName AS _site FROM quotes INNER JOIN [sites] ON quotes.SiteNo=sites.SiteNo WHERE ((quotes.DateEntered)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND accepted=1"); } else if($get['show']=='pending'){ $quotedata=getOdbcData("SELECT sites.SiteName AS _site, quotes.quoteno AS [Quote No], Format([DateEntered],'medium date') AS [Date], qheading AS Description FROM quotes INNER JOIN [sites] ON quotes.SiteNo=sites.SiteNo WHERE ((quotes.DateEntered)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND accepted=0 ".$siteno_search." ORDER BY sites.SiteNo ASC, DateEntered DESC"); $seldata=getOdbcData("SELECT sites.SiteNo AS [_siteno], sites.SiteName AS _site FROM quotes INNER JOIN [sites] ON quotes.SiteNo=sites.SiteNo WHERE ((quotes.DateEntered)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND accepted=0"); } if(count($quotedata)>0){ foreach($quotedata as $key=>$row){ $quotedata[$key]['Quote Details']='
Open
'; } foreach($seldata as $key=>$row){ if($prev!=$row['_site']){ $prev=$row['_site']; $site_data[$row['_siteno']]=$row['_site']; $site_count[$row['_siteno']]=1; } else { $site_count[$row['_siteno']]++; } } if(is_array($site_data)){ foreach($site_data as $key=>$value){ $site_data[$key]=$value.' ('.$site_count[$key].')'; $site_total+=$site_count[$key]; } } if(!$site_data) $site_data=array(); $site_data=array('all'=>'Display All ('.$site_total.')')+$site_data; $site_sel='

Select Site: '.make_select('siteno',$site_data,$post['siteno'],'class="site_select" onChange="getElementById(\'client_form\').submit();"').'

'; $groupby='_site'; $quotelist='
'.make_list_centered($quotedata,$groupby,false,false,false).'
'; } else { $quotelist='

No Quotes Found.

'; } $page_content='

'.ucfirst($get['show']).' Quotes

'.$site_sel; $page_content.=$quotelist; break; case 'jobs': if($post['siteno'] && $post['siteno']!='all'){ $siteno_search='AND sites.SiteNo='.$post['siteno']; } if($get['show']=='active'){ $jobdata=getOdbcData("SELECT sites.SiteName AS _site, work.WorkNo AS [Job No], Format([datestarted],'medium date') AS [Started], workrequested AS Description, zzjobtypes.typedesc AS [Type] FROM ([work] INNER JOIN sites ON work.siteno = sites.SiteNo) INNER JOIN zzjobtypes ON work.jobtype = zzjobtypes.typeno WHERE ((work.datestarted)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND datefinished IS NULL ".$siteno_search." ORDER BY sites.SiteNo ASC, datestarted DESC"); $seldata=getOdbcData("SELECT sites.SiteNo AS [_siteno], sites.SiteName AS _site FROM work INNER JOIN [sites] ON work.SiteNo=sites.SiteNo WHERE ((work.datestarted)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND datefinished IS NULL "); } else if($get['show']=='completed'){ $jobdata=getOdbcData("SELECT sites.SiteName AS _site, work.WorkNo AS [Job No], Format([datestarted],'medium date') AS [Started], Format([datefinished],'medium date') AS [Finished], workrequested AS Description, zzjobtypes.typedesc AS [Type] FROM ([work] INNER JOIN sites ON work.siteno = sites.SiteNo) INNER JOIN zzjobtypes ON work.jobtype = zzjobtypes.typeno WHERE ((work.datestarted)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND datefinished IS NOT NULL ".$siteno_search." ORDER BY sites.SiteNo ASC, datestarted DESC"); $seldata=getOdbcData("SELECT sites.SiteNo AS [_siteno], sites.SiteName AS _site FROM work INNER JOIN sites ON work.SiteNo=sites.SiteNo WHERE ((work.datestarted)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND datefinished IS NOT NULL "); } else if($get['show']=='maintenance'){ $jobdata=getOdbcData("SELECT sites.SiteName AS _site, work.WorkNo AS [Job No], Format([datestarted],'medium date') AS [Started], Format([datefinished],'medium date') AS [Finished], workrequested AS Description FROM ([work] INNER JOIN sites ON work.siteno = sites.SiteNo) WHERE ((work.datestarted)>=".$wheredate.") AND (((sites.clientno)=".$client['clientno'].") AND ((work.jobtype)=5)) ".$siteno_search." ORDER BY sites.SiteNo ASC, datestarted DESC"); $seldata=getOdbcData("SELECT sites.SiteNo AS [_siteno], sites.SiteName AS _site FROM work INNER JOIN sites ON work.SiteNo=sites.SiteNo WHERE ((work.datestarted)>=".$wheredate.") AND sites.clientno=".$client['clientno']." AND ((work.jobtype)=5) "); } if(count($jobdata)>0){ foreach($jobdata as $key=>$row){ $jobdata[$key]['Details']='
Open
'; } foreach($seldata as $key=>$row){ if($prev!=$row['_site']){ $prev=$row['_site']; $site_data[$row['_siteno']]=$row['_site']; $site_count[$row['_siteno']]=1; } else { $site_count[$row['_siteno']]++; } } foreach($site_data as $key=>$value){ $site_data[$key]=$value.' ('.$site_count[$key].')'; $site_total+=$site_count[$key]; } if(!$site_data) $site_data=array(); $site_data=array('all'=>'Display All ('.$site_total.')')+$site_data; $site_sel='

Select Site: '.make_select('siteno',$site_data,$post['siteno'],'class="site_select" onChange="getElementById(\'client_form\').submit();"').'

'; $groupby='_site'; $joblist='
'.make_list_centered($jobdata,$groupby,false,false,false).'
'; } else { $joblist='

No Jobs Found.

'; } $page_content='

'.ucfirst($get['show']).' Jobs

'.$site_sel; $page_content.=$joblist; break; default: $page_content='

Welcome '.$welcomename.'


Cowan Air In Touch

'; break; } } ////////////////////////////////////////////////////////////////////////////////////////// // Pages ////////////////////////////////////////////////////////////////////////////////////////// //$pages=getValues("SELECT title FROM content WHERE title!='guarantee'"); $pages=array('home','about','services','career','links','contact','client'); foreach($pages as $key=>$value){ if($value=='client'){ $links.=''; } else { $link='http://www.cowanair.com.au/index.php?p='.$value; $links.=''; } } ?> Cowan Air - Client Site
You are logged in as '.$welcomename.'
'; ?>